Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: uhz8s0Xf/zEkM+HAxTo5Y77N7Mr5CwHMzbg4qvhuv00=
Subject key identifier: 19:59:35:30:06:3A:F9:BA:91:8F:E2:E4:3B:3F:6A:29:D1:13:87:66
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 0197469EB779720261D030846814A9045A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 19:01:36 +0000
Manifest this update: Fri 06 Jun 2025 19:01:36 +0000
Manifest next update: Sat 07 Jun 2025 19:01:36 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: 8UPQyvuqKd1BKccNftRcBegeROgDOV9LYwCcari+m9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:b7:79:72:02:61:d0:30:84:68:14:a9:04:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Jun 6 19:01:36 2025 GMT
Not After : Jun 7 19:01:36 2025 GMT
Subject: CN=19593530063af9ba918fe2e43b3f6a29d1138766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:89:75:29:53:37:da:6a:ba:95:f5:c0:a4:
55:4a:ea:86:fd:12:f3:91:b8:2f:ec:fc:7e:44:22:
75:59:2b:fd:ab:3f:ea:95:87:84:01:30:6c:a3:47:
e0:60:e4:6e:b9:83:42:da:16:d7:7e:c8:4c:da:b1:
b6:4b:6b:ee:77:f4:a7:c5:0f:c7:7e:ce:82:f8:96:
0e:bf:92:10:a3:6d:4e:2c:3b:05:71:ba:65:c7:d3:
bc:f8:e1:ec:32:1a:5c:b7:ae:3a:28:0f:fc:05:5a:
65:53:0c:17:bc:d1:67:7a:1b:f7:fb:2a:0a:fc:d0:
1f:6d:0e:ae:06:0a:4d:4e:11:8e:57:4d:77:ab:9a:
dd:f1:58:a0:7e:1b:df:cb:e3:2c:cc:67:dd:b8:d8:
b9:cb:f5:b1:41:ef:8e:bf:ae:04:eb:96:95:7e:d0:
5f:4b:1a:b1:32:97:81:e4:84:d0:20:e5:07:37:fc:
2d:6d:a4:10:b8:f5:25:37:5f:2f:2e:09:ca:6c:fe:
62:76:4f:0e:2e:4f:a5:c6:58:27:88:72:65:b8:be:
26:dc:91:fe:c0:f8:ff:98:f8:7f:24:7c:b5:42:4b:
b7:ba:4c:b9:eb:f7:65:76:ce:2b:f1:70:35:fa:bb:
65:d9:5f:91:52:ce:cf:a5:da:d7:67:a6:10:81:1f:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:35:30:06:3A:F9:BA:91:8F:E2:E4:3B:3F:6A:29:D1:13:87:66
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0c:ee:83:bf:76:57:2d:29:d2:c8:8c:fc:28:a0:03:b6:c1:
24:f9:fd:49:f3:e6:47:08:e1:8f:4b:65:36:0c:eb:3e:01:c7:
ea:cd:c1:99:14:1f:ba:14:d9:0d:fc:75:1f:78:fb:89:46:d1:
db:e3:56:67:0e:56:3d:c8:5b:85:f8:da:78:70:9c:00:86:17:
56:a4:0a:0b:c4:db:2f:63:f0:19:3b:d6:80:9f:e6:1f:c2:ac:
dd:86:1f:5c:a3:e5:f3:1b:98:74:16:fe:b3:bd:d0:8d:11:8e:
94:e1:fa:e6:a6:2b:37:21:9b:16:98:13:e9:53:94:97:fa:d0:
e8:da:6c:c1:ef:7b:db:21:e2:70:a0:9a:7f:db:ae:8d:35:b4:
08:3e:dd:a2:57:17:f0:dd:79:48:ac:36:5e:33:e0:49:7c:f4:
b8:53:a4:35:60:8f:41:bb:64:63:26:e0:76:97:47:01:d3:5a:
b5:ac:16:1a:4f:83:e3:b5:f6:5e:d6:53:84:d5:09:06:65:a3:
90:2c:07:a5:03:a4:09:0b:c5:c0:aa:80:b7:5f:05:55:93:7f:
a7:1f:90:50:60:d5:a5:ba:c4:cc:01:18:78:cf:8b:7c:fc:50:
45:fc:dc:6f:83:6f:46:52:16:d2:bb:0a:e7:64:e9:f4:69:36:
ce:bc:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:28 2025 by rpki-client